Passkey Store in App issues. #188

Open
opened 2025-09-19 03:26:24 +08:00 by syafiqshaary · 6 comments
syafiqshaary commented 2025-09-19 03:26:24 +08:00 (Migrated from github.com)

Just testing on Tenstar Rp2350 Usb flashing with firmware waveshare rp2350 one v6.6 nightly dev,its working but some account having a problem like i can create passkey for discord, after doned create login wont work using passkey instead, but it works inside an setting app like wanna remove passkey discord will ass confirmation passkey if want to remove it, on nightly dev all passkey stored in yubico key authenticator app iOS but some. if creating using mobile safari/chrome and PC/Laptop but it wont on stable firmware. Also for now stable firmware is working greate for now. The issues rn on stable is passkey i created doesn't stored in hardware not appears in iOS/App.
Pico Commissioner set on my tenstar rp2350 usb you can tried if you have one.

Known Vendor : Yubikey 4/5
VID PID : 1050:0407
LED PIN : 22
Product Name : Yubico Yubikey
product name is needed like i mention or you hardware probably wont recognized.
Then click on "Commission via WebAuthn" to testing.

Just testing on Tenstar Rp2350 Usb flashing with firmware waveshare rp2350 one v6.6 nightly dev,its working but some account having a problem like i can create passkey for discord, after doned create login wont work using passkey instead, but it works inside an setting app like wanna remove passkey discord will ass confirmation passkey if want to remove it, on nightly dev all passkey stored in yubico key authenticator app iOS but some. if creating using mobile safari/chrome and PC/Laptop but it wont on stable firmware. Also for now stable firmware is working greate for now. The issues rn on stable is passkey i created doesn't stored in hardware not appears in iOS/App. Pico Commissioner set on my tenstar rp2350 usb you can tried if you have one. Known Vendor : Yubikey 4/5 VID PID : 1050:0407 LED PIN : 22 Product Name : Yubico Yubikey product name is needed like i mention or you hardware probably wont recognized. Then click on "Commission via WebAuthn" to testing.
syafiqshaary commented 2025-09-19 03:39:35 +08:00 (Migrated from github.com)

Additional, i only using only Fido2 and Fido u2f on this hardware. Idk if features like OATH & Yubico OTP work on mobile device or probably im really noob to using it, but for iOS OTP will be disable as recommended since keyboard physical detected, also the Yubico App is useless on iOS/ Crashing for me, but on Android is completely working great like i mention oath and otp idk how it works, for Passkey Stored appears only for Nightly Dev firmware for now on Android device for stable firmware it won't probably later if dev fixed it. I stayed on Stable for now due to less buggy for me.

Additional, i only using only Fido2 and Fido u2f on this hardware. Idk if features like OATH & Yubico OTP work on mobile device or probably im really noob to using it, but for iOS OTP will be disable as recommended since keyboard physical detected, also the Yubico App is useless on iOS/ Crashing for me, but on Android is completely working great like i mention oath and otp idk how it works, for Passkey Stored appears only for Nightly Dev firmware for now on Android device for stable firmware it won't probably later if dev fixed it. I stayed on Stable for now due to less buggy for me.
polhenarejos commented 2025-09-19 03:45:17 +08:00 (Migrated from github.com)

So what’s the exact problem with nightly dev build?

So what’s the exact problem with nightly dev build?
sst311212 commented 2025-09-19 07:50:05 +08:00 (Migrated from github.com)

Because Discord will create a credential as security key instead of Passkey by default.

You can intercept navigator.credentials.create in browser to force it make a resident key.

Because Discord will create a credential as security key instead of Passkey by default. You can intercept `navigator.credentials.create` in browser to force it make a resident key.
polhenarejos commented 2025-09-24 19:05:11 +08:00 (Migrated from github.com)

Seems Discord is not following the standard. Nothing to do.
Even if I force resident key, it will not login. No errors, but no login.

Seems Discord is not following the standard. Nothing to do. Even if I force resident key, it will not login. No errors, but no login.
syafiqshaary commented 2025-09-24 21:40:46 +08:00 (Migrated from github.com)

Seems Discord is not following the standard. Nothing to do.
Even if I force resident key, it will not login. No errors, but no login.

Yeahhh, it's will not work or i didnt completely tested but Nightly Development previously it wont worked when set using Windows,Web Browser, iOS & Android, didn't tested on Nightly Stable, for Stable worked with login all platform. U need to set the passkey through Android device will fixes everythings. Currently issues is can viewed stored passkey on Yubico authenticator for windows not for mobile device.

> Seems Discord is not following the standard. Nothing to do. > Even if I force resident key, it will not login. No errors, but no login. Yeahhh, it's will not work or i didnt completely tested but Nightly Development previously it wont worked when set using Windows,Web Browser, iOS & Android, didn't tested on Nightly Stable, for Stable worked with login all platform. U need to set the passkey through Android device will fixes everythings. Currently issues is can viewed stored passkey on Yubico authenticator for windows not for mobile device.
sst311212 commented 2025-09-24 23:17:54 +08:00 (Migrated from github.com)

But I can use Picokey to login Discord after making a resident key.

Image
But I can use Picokey to login Discord after making a resident key. <img width="1077" height="500" alt="Image" src="https://github.com/user-attachments/assets/4ac1227a-9648-425a-8e65-fc65c71a2657" />
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: dearsky/pico-fido#188